Re: [webauthn] Feature Request: disableAutoSelect for PublicKeyCredentialRequestOptions (#2335)

> Client Hints was deliberately designed to be a hint, as the WebAuthn Client has much more runtime context than a relying party and making something required can limit user choice.
> 

Enforcing Client Hints wouldn’t limit user choice—it follows the current behavior of WebAuthn Clients, which already prioritize a transport in the initial prompt but still let users select a different authenticator if they wish.

-- 
GitHub Notification of comment by jychab
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/2335#issuecomment-3348689826 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 29 September 2025 19:18:56 UTC